Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5655425e-c24a-3871-9a92-5483b0261bc4.roa
File:                     5655425e-c24a-3871-9a92-5483b0261bc4.roa (raw, json)
Hash identifier:          +E/tPVo4eIeHNYQ2S3IidIh5ZDkTRyUVE7WdnyrVTRQ=
Subject key identifier:   13:37:9C:B0:51:83:17:54:5F:D7:79:7A:4A:1D:79:A6:2A:2E:82:BD
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F4328584EC37249C44AE91B870E294480
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5655425e-c24a-3871-9a92-5483b0261bc4.roa
Signing time:             Sat 08 Aug 2026 01:00:11 +0000
ROA not before:           Sat 08 Aug 2026 01:00:11 +0000
ROA not after:            Fri 06 Nov 2026 02:00:11 +0000
asID:                     10796
IP address blocks:        24.164.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Sep 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:c3:72:49:c4:4a:e9:1b:87:0e:29:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Aug  8 01:00:11 2026 GMT
            Not After : Nov  6 02:00:11 2026 GMT
        Subject: CN=ebf32517-1353-4651-b679-12cd58cb653a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:50:5e:6e:63:df:b8:38:45:22:fc:5c:f7:58:
                    fe:58:ad:b3:f2:76:71:1e:12:43:69:92:2b:7b:92:
                    f7:24:b7:65:86:63:69:17:4f:95:70:a4:03:c9:37:
                    c0:f1:2b:77:4e:c1:b6:b5:d1:56:cb:90:19:f4:2f:
                    c7:d6:be:d9:d3:70:6b:a5:32:2e:43:3b:4b:65:c7:
                    f9:0b:2e:57:7c:2d:d0:1e:91:78:86:ad:ef:97:de:
                    d3:d2:96:c2:44:bc:c5:3c:0d:92:3d:27:f7:5b:5e:
                    e3:d5:80:2d:86:eb:6e:f2:e5:4a:80:43:31:a2:1e:
                    1b:f9:db:93:25:63:59:c8:59:48:c5:4f:c6:e7:1a:
                    18:47:14:94:e8:f1:8b:76:7b:cd:01:2e:cb:97:83:
                    ba:0f:90:b4:9e:06:63:7b:48:53:e1:5e:d9:c8:98:
                    f8:bd:50:81:5d:5e:7d:03:8e:a3:44:3e:bd:af:92:
                    ff:20:72:49:4b:97:21:f3:23:46:9b:05:b2:40:a0:
                    b6:1f:1b:e7:5a:01:7b:e9:0d:44:18:da:79:8e:bd:
                    74:17:40:19:2c:3f:02:33:a7:51:e3:d7:8c:60:24:
                    45:c1:1a:7a:88:7c:10:e2:d4:99:ad:7f:26:3a:41:
                    04:d4:71:1f:08:47:b2:4c:a8:d7:84:97:95:4c:46:
                    7e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:37:9C:B0:51:83:17:54:5F:D7:79:7A:4A:1D:79:A6:2A:2E:82:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/5655425e-c24a-3871-9a92-5483b0261bc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.164.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:eb:fb:b3:a9:8a:02:d4:82:de:89:e9:1f:3b:4e:0d:1f:
         29:e9:a0:02:72:37:b3:29:18:be:ef:4f:56:b6:63:48:3b:e4:
         9c:8a:24:8d:f4:72:99:74:2a:29:21:ae:51:1a:e8:2d:08:34:
         7a:fc:23:8d:b0:e2:dc:96:3d:c1:01:89:75:ef:aa:d9:41:00:
         26:49:80:54:31:6d:00:b5:1c:a3:5e:5e:e5:3c:58:89:83:33:
         cd:ae:74:89:63:bd:6c:a3:d4:32:74:a0:5e:2d:a8:5a:5f:91:
         ed:9e:fa:4f:b0:02:0e:e2:8f:11:0b:57:33:11:9f:0c:bb:cf:
         4a:90:e3:7f:60:82:24:11:76:6f:51:f7:42:91:1c:7b:53:3c:
         28:4f:33:0d:8e:4c:35:56:68:23:23:26:4c:26:c8:6f:92:74:
         44:2b:d1:77:79:ce:c1:be:14:32:04:da:9d:84:5c:90:6a:63:
         d7:3b:d5:43:7b:2b:6b:f3:07:78:5c:c9:0f:bc:38:36:17:e0:
         6b:da:e9:fa:45:19:38:55:5d:f6:41:ef:a4:5a:9a:6f:98:e8:
         19:40:c1:5a:51:ee:72:6f:ed:91:b4:2d:a5:d5:a4:ee:32:71:
         76:27:76:9c:bf:42:b6:0b:7f:58:70:e4:df:de:b1:fb:fa:e3:
         6b:55:7d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:24:47 2026 by rpki-client